what's the sense of traffic analysts?
Hello everyone! I know that it's pretty stupid question, but... What's the sense of traffic analysts today? What can (and need) they do on their work? Especially i have some questions about HTTPS traffic analyze, because they cant read or analyze it. It might sound strange, but I view this as traffic analysis from a hacker's perspective. What’s the point of looking at a target's traffic if you can't figure out where it's going?
Not sure what you mean - a typical Ethernet frame, assuming that it carries an IP packet, has two destination addresses: one for layer2, a MAC address, and one for layer3, an IP address. At some level, clearly these indicate 'where it's going'.
What questions? Not all problems require unwrapping encrypted traffic. Some do, sure, but not all. What if you have a basic L3 routing problem? Whether you can decrypt TLS from HTTPS or not will have no bearing on solving that issue.